Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/359EA23662B311F081881A48C4F9AE02.roa
File:                     359EA23662B311F081881A48C4F9AE02.roa (raw, json)
Hash identifier:          lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=
Subject key identifier:   69:A2:F0:94:46:DB:B8:C9:92:7A:72:4F:1D:6D:11:06:33:5F:AB:5E
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       032D
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/359EA23662B311F081881A48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:41:28 +0000
ROA not before:           Wed 22 Oct 2025 02:45:50 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        202.155.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 22 02:45:50 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48858-04c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:c9:3d:03:29:73:76:f8:80:94:05:4c:98:
                    11:bd:93:fb:5d:4d:63:40:0d:99:d2:dc:2b:fc:29:
                    64:62:b1:1f:ee:4c:e5:46:bd:46:65:6a:29:fc:0a:
                    bc:8c:40:ef:20:ec:da:3f:8d:1f:fe:d9:ce:db:6a:
                    45:01:b1:fc:37:21:a3:8c:cd:f8:7f:eb:02:cc:ae:
                    00:c4:2c:3d:a0:04:f9:04:ee:8d:4f:58:dd:d1:3e:
                    8b:46:4f:84:d1:28:ff:21:51:f4:97:4d:02:06:68:
                    d5:1e:50:b1:54:80:31:20:cf:7f:03:2e:13:c6:d7:
                    d7:75:b2:11:64:16:31:26:4d:16:a5:6f:df:f7:5b:
                    44:5d:08:3d:e8:be:c9:1c:7c:cb:2d:2f:f8:28:2c:
                    85:55:9b:ee:ee:22:04:02:80:1d:fa:12:d5:32:dc:
                    0e:ea:cd:76:0f:ee:91:a8:5b:e4:22:44:f3:e9:31:
                    a5:be:c8:71:ad:69:b8:69:95:d8:8c:c7:96:f8:fb:
                    0c:fb:f1:00:f9:73:d9:07:c6:47:78:50:e0:84:97:
                    ad:e4:f6:b0:62:7e:36:0c:6a:92:80:09:81:b6:1c:
                    e6:2b:aa:8c:d4:93:4f:f1:ed:06:06:8c:08:d9:e6:
                    7f:b9:87:4b:00:dc:3f:0b:e9:d1:73:d3:bd:b1:19:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:F0:94:46:DB:B8:C9:92:7A:72:4F:1D:6D:11:06:33:5F:AB:5E
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/359EA23662B311F081881A48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:17:fc:ef:c9:eb:52:4e:9d:c0:a3:e2:1b:03:f4:e7:26:43:
         27:cc:9a:7b:f4:f2:f5:a7:b7:5d:e0:f8:53:4a:d9:d3:85:87:
         ba:b3:05:64:93:a1:78:fb:d2:ce:44:f2:02:54:04:34:f3:34:
         fe:b6:3c:c8:a1:9b:d8:ed:31:c7:73:17:95:56:f4:49:24:9e:
         e2:0a:bc:5a:f4:41:d8:a3:ec:e9:38:a5:32:d1:83:20:04:44:
         f1:9a:2c:c5:14:98:74:6f:e4:8a:16:69:6b:25:a6:8f:ad:20:
         50:14:52:d1:c3:c2:1b:26:0b:64:89:6c:8a:25:51:80:03:54:
         52:eb:2f:c0:92:5c:8a:e5:06:f0:de:70:3c:40:41:1e:b2:f8:
         90:15:fc:0b:34:aa:b8:6f:6d:97:7d:fe:47:0c:6b:23:74:13:
         e3:fb:5e:28:b5:69:83:23:fb:b7:13:ad:81:83:18:46:1c:34:
         62:32:c9:4d:03:77:32:49:36:55:7e:7f:97:d6:27:44:aa:cf:
         c9:07:b9:18:4d:84:60:f4:d0:d8:bd:8d:16:0d:36:41:9e:d6:
         0c:c7:8d:73:a5:fa:d4:61:2d:19:93:81:b7:15:00:14:ed:33:
         04:53:79:34:ab:1a:51:16:7a:65:db:16:2e:09:36:96:bc:fb:
         de:be:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:35 2026 by rpki-client